You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

Register a free account to unlock additional features at BleepingComputer.com

Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

BC AdBot (Login to Remove)

Hello there and welcome to BleepingComputer. My name is Charles and I will be dealing with your log today. Please download VundoFix to your Desktop.Double-click VundoFix.exe to run it.Click the Scan for Vundo button.Once it's done scanning, click the Remove Vundo button.You will receive a prompt asking if you want to remove the files, click YESOnce you click yes, your desktop will go blank as it starts removing Vundo.When completed, it will prompt that it will reboot your computer, click OK.Please post the contents of C:\vundofix.txt in your next reply. Note: It is possible that VundoFix encountered a file it could not remove. VundoFix will run on reboot, simply follow the above instructions starting from "Click the Scan for Vundo button" when VundoFix appears upon rebooting.

Download Combofix to your Desktop.Double click combofix.exeFollow the prompts that are displayed. Don't click on the window while the fix is running, because that will cause your system to hang.When finished, it should produce a log, combofix.txt. Post that in your next reply.

Then scan again with HijackThis and include the log, along with the Combofix and Vundofix reports in your reply.Thanks,Charles

If you are pleased with the service I have offered, you may like to consider making a donation.

Hello Charles,Thanks for your reply and clear instructions. I have done as you requested and sojmething was found and corrected. I have included the logs here as requested, look a bit like mumbo jumbo to me, but am more than confident that you'll know what it all means Regards,David

VundoFix V6.5.9

Checking Java version...

Sun Java not detectedScan started at 13:47:15 07/10/2007

Listing files found while scanning....

C:\WINDOWS\system32\lcyxefwb.dll

Beginning removal...

Attempting to delete C:\WINDOWS\system32\lcyxefwb.dllC:\WINDOWS\system32\lcyxefwb.dll Has been deleted!

The files you asked me about did make me wonder, the folders in the program files directory Ajealfwy, Gsrvrkux, klytilcj and Txqxwfad are all empty and I wondered if I should delete them. When I looked in the folders it was with them set to show hidden files, but they still appear empty. The folder names do look similar to some weird and wonderful .dll files I have had in start up in the past, which you have subsequently managed to get rid of.
The folder gs in the program files directory contains one file and two folders. The folders are Font and gs8.54 and the file is a large G icon and called UNINSTGS. My inpression is that it is something to do with Ghost Script whatever that may be.

Due to lack of feedback, this topic is now closed.If you need this topic reopened, please request this by sending me a Personal Message including a link to your thread.This applies only to the original topic starter. Everyone else please begin a New Topic.

If you are pleased with the service I have offered, you may like to consider making a donation.